Security Advisory Specialist – Pre-sales/Delivery Experience

NST Recruitment Limited

Role Overview

You have the chance to work for a global IT service provider, helping to accelerate the digital and IT transformation for customers. They have been operating for over 20 years, providing global support to organisations all over the world.

They are looking for a Security Advisory specialist to join the team, in this role you will be working across their security portfolio, internally and externally. This role will involve travel to client sites, development of GRC advisory presentations and representing the company at conferences and events.

Responsibilities

• Promote awareness of the security advisory portfolio within the organization and at external conferences and events.
• Travel to client sites as needed to build stakeholder relationships and present the security advisory portfolio.
• Develop collateral and presentations for GRC advisory services.
• Conduct training sessions with sales and pre-sales teams on GRC advisory services.
• Collaborate with other departments to integrate GRC advisory services into broader service offerings.
• Review and draft initial responses to tenders.
• Create Statements of Work and prepare quotes to meet client requirements.
• Manage key third-party relationships.
• Deliver assessments against security best practice frameworks (eg, ISO 27001, Cyber Essentials, CIS Controls).
• Support the delivery of consultancy engagements.
• Coordinate client engagements and manage projects throughout their life cycle.
• Perform auditing and implement frameworks.

Skills Required

• Pre-Sales/Delivery experience
• Knowledge of NIS2 and DORA.
• Expertise in consultancy and delivery of security best practice frameworks, including ISO 27001, CIS Critical Security Controls, NIST Cybersecurity Framework, and UK NCSC Cyber Assessment Framework.
• Understanding and scoping of penetration testing.
• Understanding and scoping of Red Teaming and Purple Teaming.
• Creation and delivery of incident readiness activities (eg, playbooks, policy development, tabletop exercises).
• Knowledge of Zero Trust principles.
• Expertise in data protection and governance.
• Experience in consultancy and delivery of PCI DSS.
• Skill in policy development (eg, End User Access, Acceptable Use Policy).